Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJV9WtLzwSRZ7KTfsny4IKuua8g.roa
File: pJV9WtLzwSRZ7KTfsny4IKuua8g.roa (raw, json)
Hash identifier: XyvLlKAd9pBV/0pxLC38cDdvYwO5P4MKuyW2XvOxFuc=
Subject key identifier: A4:95:7D:5A:D2:F3:C1:24:59:EC:A4:DF:B2:7C:B8:20:AB:AE:6B:C8
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB82ABC78166BFF896B06CF8841CB2999
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJV9WtLzwSRZ7KTfsny4IKuua8g.roa
Signing time: Fri 31 Jul 2026 12:33:56 +0000
ROA not before: Fri 31 Jul 2026 12:33:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401896
IP address blocks: 82.153.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:2a:bc:78:16:6b:ff:89:6b:06:cf:88:41:cb:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 31 12:33:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4957d5ad2f3c12459eca4dfb27cb820abae6bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:19:c2:e1:d0:be:a1:17:c9:18:8b:5c:8d:
dd:95:8a:f4:8e:56:a8:10:fe:05:6b:3d:f8:bb:29:
36:33:a3:b5:4c:77:6e:50:e9:92:7b:d4:04:22:b6:
1e:16:cb:73:81:28:d4:31:fb:5b:3d:5f:8c:51:63:
5d:51:b6:4e:6a:23:e8:ea:56:20:42:23:fa:d7:47:
f6:5d:8f:b1:55:dc:08:cf:e2:76:04:85:55:11:9c:
b2:3e:28:94:c8:c3:d3:56:27:ca:78:d2:4e:bb:43:
f4:53:7a:81:a0:a3:00:0a:96:40:02:03:9d:12:97:
56:f1:e4:37:2b:cd:37:b1:84:68:9a:05:ce:e3:95:
e5:58:c0:0b:fb:12:78:19:4b:1b:64:4f:c7:02:2d:
ba:44:b4:af:18:73:72:9f:d1:82:d1:5e:c3:65:df:
df:16:72:4b:1d:f8:eb:b2:4d:aa:de:94:69:6f:20:
01:a2:59:55:4e:f8:d6:a5:8c:c0:26:77:29:3f:4a:
b4:7c:32:dd:93:bd:9d:af:cb:01:ee:fc:b2:3c:40:
56:3b:db:79:9e:bf:47:63:04:bc:45:a8:e2:80:fa:
d8:71:8f:2d:29:db:8a:8b:24:17:f1:ea:45:a4:9f:
80:50:83:bc:c3:e6:fa:9a:f4:3a:83:d8:7e:11:7e:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:7D:5A:D2:F3:C1:24:59:EC:A4:DF:B2:7C:B8:20:AB:AE:6B:C8
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pJV9WtLzwSRZ7KTfsny4IKuua8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.214.0/24
Signature Algorithm: sha256WithRSAEncryption
46:33:3d:c5:77:26:a4:0b:39:e6:3e:ca:04:39:08:4b:4d:54:
59:1c:b0:8c:69:51:99:ae:0b:db:b3:66:5b:94:05:c8:0d:09:
bc:3b:a2:35:87:e7:9c:bf:5d:50:a6:46:90:95:16:2a:5c:08:
cc:23:82:d9:62:75:0e:24:a3:90:88:37:ae:bf:df:23:b8:db:
a5:c9:2b:97:54:3e:da:5c:96:7d:26:04:23:b0:ad:c7:ed:68:
7d:b2:18:c3:9f:bf:8e:48:49:42:13:82:44:f4:3c:e6:5c:5d:
f0:ee:df:18:b8:61:14:db:bf:ef:c0:41:db:c8:8a:f8:7f:a2:
0d:b4:58:e7:55:1a:fc:f1:38:f0:c6:b0:92:07:83:57:72:fe:
7a:53:dc:7f:d6:70:b4:f5:9a:d3:ef:47:e6:e7:dd:99:62:b7:
cc:80:19:76:f0:55:70:8f:24:a2:34:0c:f8:08:c0:df:58:c8:
78:21:cb:e7:80:28:17:b7:7e:6a:3b:f3:4e:97:86:2f:92:04:
2f:6e:0e:7d:e1:5f:53:54:86:74:31:f6:b0:b6:ad:d5:46:f9:
22:72:4b:50:3a:84:fc:e5:59:c9:25:2a:8a:e3:5e:6f:e8:73:
f6:e6:9d:b9:42:18:bf:bb:d6:3c:43:ea:0a:b8:09:0c:f8:5f:
5b:0a:61:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:28 2026 by rpki-client